We help IT Professionals succeed at work.

what is the best and cheapest way to web filter in work

Hi in work we always used to catch people on facebook and site they should not be on, so I set up opendns which works quite well. Problem now is we have people that need to access facebook and twitter and opendns takes ages to update when you change the settings. If there a cheap option to allow 2 users to always have acess and the rest to be on a timed blocked list so they can use it in their lunch etc.
Watch Question

Chief Information Officer, EE MVE
Most Valuable Expert 2019
Check out SQUID

Also K9
Block web sites in more than 70 categories, including pornography, gambling, drugs, violence/hate/racism, malware/spyware, phishing

btanExec Consultant
Distinguished Expert 2019
in fact router may have some basic filter (mainly by category or by URL)
e.g. Vigor routers–Web Content Filter and URL Content Filter. so may want to explore if existing has that. http://www.draytek.com/index.php?option=com_k2&view=item&id=1493&Itemid=293&lang=en
e.g. ZeroShell and DansGuardian http://www.zeroshell.org/forum/viewtopic.php?t=2594

Others mainly leveraging Squid as proxy
e.g. pfsense (fw) + squid (proxy-SSL Bump) + Diladele (filter) https://forum.pfsense.org/index.php?topic=72528.0
- Also using Diladele to block Facebook and YouTube at Working Hours:
(It is actually a Python Django web application that is usually deployed on HTTP port 80 using Apache HTTP server) http://docs.diladele.com/faq/filtering/non_working_hours.html

e.g. Zentyal http proxy that is using Squid as base
- https://wiki.zentyal.org/wiki/En/3.5/HTTP_Proxy_Service